VulnSocial

CVE-2026-10858Disclosure

LOWCVSS 9.9 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-20); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-09-20: 2Mentions · 2026-09-21: 2Patch / Workaround · 2026-09-20: 2Patch / Workaround · 2026-09-21: 1Technical Details · 2026-09-20: 2Technical Details · 2026-09-21: 209-2009-21
Signal classification2 categories
Disclosure
250.0%
Patch
250.0%
Referenced assets3 URLs
Full discourse4 posts
  • ThreatWire@ThreatWire_
    Patch

    🚨 CRITICAL: Two IBM MQ vulnerabilities can lead to remote code execution. CVE-2026-10747 (CVSS 10.0) is a pre-auth heap buffer overflow that could allow an unauthenticated remote attacker to execute arbitrary code through the MQ listener. CVE-2026-10858 (CVSS 9.9) is a heap buffer underflow affecting IBM MQ for HPE NonStop and can also lead to arbitrary code execution. ⚠️ Patch affected IBM MQ deployments immediately. 🔴 IBM has released fixes for both vulnerabilities. 🔗 IBM Security Bulletin https://www.ibm.com/support/pages/node/7284543 #IBM #IBMMQ #CVE #RCE #CyberSecurity #Infosec

    Post summary

    The post describes two critical IBM MQ vulnerabilities allowing remote code execution and notes that IBM has released patches, urging immediate application.

    2802061.1K
    1.9K followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    🚨 CRITICAL | CVSS 9.9 — IBM MQ for HPE NonStop CVE-2026-10858 is a heap buffer underflow vulnerability affecting IBM MQ for HPE NonStop. 💥 Impact: Arbitrary Code Execution 🔹 CVSS: 9.9 Critical 🔹 Product: IBM MQ for HPE NonStop #CyberSecurity #InfoSec #CVE #IBM #IBMMQ

    Post summary

    The text announces CVE-2026-10858, a critical heap buffer underflow in IBM MQ for HPE NonStop (CVSS 9.9, RCE impact), providing technical details but no PoC, exploit, patch, or active exploitation evidence.

    12050102
    403 followersView on X
  • ExploitGrid@exploitgrid
    Patch

    🔧 CVE-2026-10858 | Remediation Successful exploitation could allow an attacker to execute arbitrary code on an affected system. IBM has released security fixes for affected deployments. Administrators should apply the applicable update. 🔗IBM Security : https://ibm.com/support/pages/node/7284543

    Post summary

    The post announces remediation for CVE-2026-10858, noting that IBM has released security fixes and urging administrators to apply the update.

    0001048
    155 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Disclosure

    Critical IBM MQ vulnerabilities allow remote code execution. Learn how CVE-2026-10747 and CVE-2026-10858 hit 10.0 CVSS and require urgent patching. #IBMMQ #CVE202610747 #CVE202610858 #Cybersecurity #Infosec https://securityonline.info/ibm-mq-vulnerabilities-cve-2026-10747/

    Post summary

    The tweet describes two critical IBM MQ vulnerabilities (CVE-2026-10747 and CVE-2026-10858) that enable remote code execution with a CVSS score of 10.0 and urges urgent patching, without naming specific exploits or fixes.

    00000434
    13.0K followersView on X

Explore more

Back to dashboard